flywheel-admin

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Several entries are direct raw install scripts (curl raw.githubusercontent | bash) and multiple GitHub repos/raw files come from a single personal/unvetted account (Dicklesworthstone), which is a common malware distribution vector and therefore suspicious.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime commands that fetch and execute remote code (curl ... | bash) and clone-and-build a remote repo—specifically https://raw.githubusercontent.com/Dicklesworthstone/agentic_coding_flywheel_setup/main/install.sh, https://github.com/Dicklesworthstone/destructive_command_guard.git, and https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail_rust/main/install.sh—which are downloaded and executed during provisioning/fixes.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs operators to run privileged system-changing commands (e.g., "sudo tailscale up ...", a remote bootstrap via "curl ... | bash", and creation/copying into system project paths), which directs the agent/operator to obtain elevated privileges and modify machine state.